Can I have the shared IP Page on all IPs?

My current server has 3 IP addresses. If I go to the hostname of the server I just get the sharedip page - which is fine, I never intend to put up any non-ispconfig sites on this server. If I also go to the primary IP of this server - I also get the page.... all good.

*However* if I go to the hostnames of the other IPs or the IPs themselves I get a listing of /var/www which is a huge security hole as this exposes the home directories of all the users to the web.

Is there any easy way to fix this? - I know I can change the default vhost to include the other IPs - but this gets overwritten everytime anything is changed. I also looked in /root/ispconfig/scripts/lib/config.lib.php and this just uses SERVERIP to configure this vhost. Shouldn't the other IPs in the IP List in the server settings page be used???